CVE-2026-76004 - UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow

Back Back to CVE browser

CRITICAL

UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow

Published Aug 19, 2026

9.4

CRITICAL

CVSS 4.0

EPSS 0.79%

Description

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Affected products

Vendor UTT Product HiPER 1250GW Default
n/a
- Version
  3.2.7-210907-180535
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

UTT

HiPER 1250GW

n/a

Version	Status	Constraints
3.2.7-210907-180535	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-62223
Advisory
https://github.com/7wkajk/CVE-VUL/blob/main/106.md
exploit
https://vuldb.com/cve/CVE-2026-76004
third-party-advisory
https://vuldb.com/submit/877885
third-party-advisory
https://vuldb.com/vuln/391920
vdb-entrytechnical-description
https://vuldb.com/vuln/391920/cti
signaturepermissions-required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-62223		Advisory
https://github.com/7wkajk/CVE-VUL/blob/main/106.md		exploit
https://vuldb.com/cve/CVE-2026-76004		third-party-advisory
https://vuldb.com/submit/877885		third-party-advisory
https://vuldb.com/vuln/391920		vdb-entrytechnical-description
https://vuldb.com/vuln/391920/cti		signaturepermissions-required